Privacy Policy

1. Introduction

 

POLYPIÙ SRL takes your privacy seriously and is committed to respecting it. This privacy policy (“Privacy Policy”) describes the personal data processing carried out by Polypiù through the websites www.polypiù.com and www.polypiu.shop (Website(s)) and the commitments made by the Company in this respect. Polypiù may process the user's personal data when the user visits the Website and uses the services and features on the Website. In the sections of the Website where the user's personal data are collected, a specific information notice pursuant to Articles 13/15 of EU Reg. 2016/679 is normally published.

Where required by EU Reg. 2016/679, user’s consent will be requested before processing their personal data. If the user provides the personal data of third parties, they must ensure that the disclosure of such data to POLYPIÙ and the subsequent processing for the purposes specified in the applicable privacy policy is in accordance with EU Reg. 2016/679 and applicable law.

 

2. Identification Details of the Data Controller, Data Processor and Privacy Officer

 

The Data Controller is POLYPIÙ S.R.L. with registered office in Via Murri 24, Magenta (MI) in the person of its legal representative pro tempore.

Email address privacy@polypiu.it

The data processor is Domenico Moretti

PEC certified email: amministrazione@pec.polypiu.it

 

3. Type of Data Processed

 

Visiting and consulting the Website does not generally entail the collection and processing of the user's personal data, except for browsing data and cookies as specified below. In addition to the so-called “browsing data” (see below), personal data voluntarily provided by the user when interacting with the Website's features or requests to use the services offered on the Website may be processed. In compliance with the Privacy Code, POLYPIÙ SRL may also collect the user's personal data from third parties in the course of its business.

 

4. Cookies and Browsing Data

 

The Website uses “cookies”. By using the Website, you consent to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the user's computer. There are two macro-categories of cookies: technical cookies and profiling cookies. Technical cookies are necessary for the proper operation of a website and to allow the user to browse. Without them, the user may not be able to view pages correctly or use certain services. Profiling cookies have the task of creating user profiles in order to publish advertising messages in line with the preferences expressed by the user while browsing. Cookies can also be classified as: _ “Session” cookies, which are deleted immediately when the browser is closed; “persistent” cookies, which remain within the browser for a certain period of time. These are used, for instance, to recognise the device connecting to a website, facilitating the user’s authentication. _ “Own” cookies, generated and managed directly by the operator of the website the user is browsing on. _ “Third-party” cookies, generated and managed by parties other than the operator of the website the user is browsing on.

 

5. Cookies used on the Website

 

The Website uses the following types of cookies:

a. Own, session and persistent cookies, which are necessary to enable browsing on the Website, for internal security and system administration purposes.

b. Third-party, session and persistent cookies, which are necessary to allow the user to use multimedia elements on the Website, such as images and videos.

c. Third-party, persistent cookies used by the Website to send statistical information to the Google Analytics system, through which POLYPIÙ SRL can perform statistical analysis of Website access/visits. The cookies used are for statistical purposes only and collect information in aggregate form. Through a pair of cookies, one of which is persistent and the other a session (expiring when the browser is closed), Google Analytics also saves a log of the times when the visit to the Website begins and ends. It is possible to prevent Google from recording this data via cookies and subsequent processing of the data by downloading and installing a browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=en

d. Third-party, persistent cookies used by the Website to include buttons from certain social networks (Facebook, Twitter and Google+) on its pages. By clicking on one of these buttons, the user can publish the content of the website page currently being visited on their personal page of the relevant social network. The Website may contain links to other websites (so-called third-party websites). POLYPIÙ SRL has no access to or control over cookies, web beacons and other user tracking technologies that may be employed by third-party websites that the user may access from the Website. POLYPIÙ SRL has no control over the content and materials published by or obtained through third-party websites, nor over the related methods of processing the user's personal data, and expressly disclaims any responsibility for such eventualities. The user is required to check the privacy policy of the third-party websites accessed through the Website and to informed themselves about the conditions applicable to the processing of their personal data. This Privacy Policy applies only to the Website as defined above.

 

6. How to Disable Cookies in Browsers

 

If you wish, you can also manage cookies directly via your browser settings. However, deleting cookies from your browser may remove the preferences you have set for the POLYPIÙ website, so you should visit this page periodically to recheck your preferences. For further information and support, you can also visit the specific help page of the web browser you are using: • Internet Explorer • Firefox • Safari • Chrome • Opera

 

7. Retention of Personal Data

 

The personal data are stored and processed through computer systems owned and operated by POLYPIÙ IT or by third-party technical service providers. See the section “Accessibility of Personal Data” below for further details. The data are processed exclusively by specifically authorised personnel, including personnel assigned to perform unscheduled maintenance. The personal data will be stored for the duration of the contract and after the end of the contract in order to fulfil POLYPIÙ's legal obligation, including claims, in accordance with applicable law, and will then be deleted or anonymised. If you consent to the processing of our products and services for direct marketing purposes after the expiry of the contract, we will process the data until the consent is withdrawn.

 

8. Purposes and Methods of Data Processing

 

POLYPIÙ may process the user's personal data for the following purposes: user use of services and features on the Website, management of requests and reports from its users, sending newsletters, management of job applications received through the Website, etc. Furthermore, with the user's further and specific optional consent, POLYPIÙ may process personal data for marketing purposes, i.e., to send the user promotional materials and/or commercial communications relating to the Company's services to the addresses indicated, both through traditional methods and/or means of contact (such as, paper mail, operator phone calls, etc.) and automated means (such as, internet communications, fax, email, text messages, apps for mobile devices such as smartphones and tablets, social network accounts such as Facebook or Twitter, automated operator phone calls, etc.). Personal data are processed in both paper and electronic form and entered into the company's information system in full compliance with EU Reg. 2016/679, including security and confidentiality profiles and inspired by the principles of fair and lawful processing. In accordance with EU Reg. 2016/679 data are kept and stored for as long as necessary to achieve the purposes they are processed for, and in any case for as long as you decide to remain registered on our website.

 

9. Security and Quality of Personal Data

 

POLYPIÙ is committed to protecting the security of the user's personal data and complies with the security provisions set out in the applicable laws in order to prevent loss of data, illegitimate or unlawful use of data and unauthorised access thereto, with particular reference to the Technical Regulations on minimum security measures. Moreover, the information systems and computer programs used by POLYPIÙ are configured in such a way as to minimise the use of personal and identifying information. Such data are processed only for the achievement of the specific purposes pursued from time to time. POLYPIÙ uses multiple advanced security technologies and procedures to facilitate the protection of the users' personal data. For example, personal data are stored on secure servers located in places with protected and controlled access. Users can help POLYPIÙ keep their personal data correct and up to date by communicating any changes to their address, job title, contact information, etc.

 

10. Scope of Disclosure and Data Access

 

The user’s personal data may be disclosed to: - All parties to whom the right of access to such data is recognised by virtue of regulatory provisions. - Our employees and contractors, within the scope of their duties. - All those natural and/or legal, public and/or private persons when such disclosure is necessary or functional to the performance of our business and in the manner and for the purposes set out above.

 

11. Scope of Provision of Personal Data

 

The provision of certain personal data by the user is required in order to allow the Company to manage communications, requests received from the user or to re-contact the user to follow up on their request. This type of data is marked with an asterisk [*], and in this case the provision of such data is mandatory in order to allow the Company to process the request, which, if not provided, cannot be fulfilled. Conversely, the collection of other data not marked with an asterisk is optional. Failure to provide such data will have no consequences for the user. The provision of personal data by the user for marketing purposes, as specified in the section “Purposes and Methods of Data Processing”, is optional, and refusal to provide such data will have no consequences. The consent given for marketing purposes shall be deemed to extend to the sending of communications by both automated and traditional methods and/or means of contact, as illustrated above.

 

12. Rights of the Data Subject

 

12.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679 The data subject shall have the right to be informed by the data controller as to whether or not their personal data are being processed and, if so, to obtain access to such personal data and the following information:

a. The purposes of the data processing.

b. The categories of personal data concerned.

c. The recipients or categories of recipients to whom the personal data have been or will be disclosed, especially if they are recipients of third countries or international organisations.

d. The retention period of the personal data provided, or, if this is not possible, the criteria used to determine this period.

e. The existence of the right of the data subject to ask the data controller to correct or erase personal data or restrict the processing of their personal data or to object to their processing.

f. The right to lodge a complaint with a supervisory authority.

g. The existence of an automated decision-making process, including profiling, and – at least in such cases – significant information on the logic used, as well as the importance and the expected consequences of such processing for the data subject.

 

12.2 Right under Art. 17 of EU Reg. 2016/679 – right to erasure (“right to be forgotten”) The data subject shall have the right to obtain from the controller the erasure of personal data concerning them without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: a. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. b. The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing. c. The data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2). d. The personal data have been unlawfully processed. e. The personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject. f. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) or EU Reg. 2016/679.

 

12.3 Right under Art. 18 Right to restriction of processing The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: a. The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. b. The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead. c. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims. d. The data subject has objected to processing pursuant to Article 21(1) of EU Reg. 2016/679 pending the verification whether the legitimate grounds of the controller override those of the data subject.

 

12.4 Right under Art. 20 Right to data portability The data subject shall have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

 

13. Withdrawal of Consent to Processing

 

You have the right to withdraw your consent to the processing of your personal data by sending a registered letter with return receipt to the following address: Polypiù S.r.l. Via Murri 24, Magenta (MI) accompanied by a photocopy of your identity document, with the following text: “Withdrawal of consent to the processing of all my personal data” or by PEC certified email to amministrazione@pec.polypiu.it . At the end of this operation your personal data will be removed from the archives as soon as possible. If you wish to have more information on the processing of your personal data or to exercise the rights referred to in point 7 above, you may send a registered letter with return receipt to the following address: POLYPIÙ S.R.L. privacy@polypiu.it accompanied by a photocopy of your identity document, with the following text: “Withdrawal of consent to the processing of all my personal data” or by PEC certified email to PRIVACY EMAIL ADDRESS. Before we can provide you with or change any information, we may need to verify your identity and ask you some questions. A response will be provided as soon as possible.